Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[WPT/content-security-policy] Add generated tests #27535

Merged
merged 1 commit into from Feb 26, 2021

Conversation

chromium-wpt-export-bot
Copy link
Collaborator

@chromium-wpt-export-bot chromium-wpt-export-bot commented Feb 8, 2021

This CL adds generated CSP tests using
/wpt/common/security-features/tools/generate.py
under
/wpt/content-security-policy/gen/,
primarily to add comprehensive test coverage around workers.

This CL only adds tests for

  • worker-src and script-src directives
  • worker- and script-related subresource requests
  • on top-level Documents.

This CL doesn't remove manually-written tests
with similar test coverage, because it would still need
careful comparison of test coverage and
adding more test assertions in
/wpt/content-security-policy/generic/test-case.sub.js.

The failures on Chromium are about the lack of
securitypolicyviolation events due to https://crbug.com/928964.

The failures on other browsers are, as far as I briefly looked at,
about the lack of securitypolicyviolation events, or
due to unimplemented support for underlying features
like (module) SharedWorkers.

Bug: 928964, 1179832
Change-Id: Ib1b81827ab2547a6c59071b2f1a6613c9f9a32e8
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2681956
Reviewed-by: Andy Paicu <andypaicu@chromium.org>
Commit-Queue: Hiroshige Hayashizaki <hiroshige@chromium.org>
Cr-Commit-Position: refs/heads/master@{#857969}

Copy link
Collaborator

@wpt-pr-bot wpt-pr-bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The review process for this patch is being conducted in the Chromium project.

@chromium-wpt-export-bot chromium-wpt-export-bot force-pushed the chromium-export-cl-2681956 branch 4 times, most recently from 8bc9d65 to bf6602a Compare February 19, 2021 00:04
This CL adds generated CSP tests using
/wpt/common/security-features/tools/generate.py
under
/wpt/content-security-policy/gen/,
primarily to add comprehensive test coverage around workers.

This CL only adds tests for

- worker-src and script-src directives
- worker- and script-related subresource requests
- on top-level Documents.

This CL doesn't remove manually-written tests
with similar test coverage, because it would still need
careful comparison of test coverage and
adding more test assertions in
/wpt/content-security-policy/generic/test-case.sub.js.

The failures on Chromium are about the lack of
securitypolicyviolation events due to https://crbug.com/928964.

The failures on other browsers are, as far as I briefly looked at,
about the lack of securitypolicyviolation events, or
due to unimplemented support for underlying features
like (module) SharedWorkers.

Bug: 928964, 1179832
Change-Id: Ib1b81827ab2547a6c59071b2f1a6613c9f9a32e8
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2681956
Reviewed-by: Andy Paicu <andypaicu@chromium.org>
Commit-Queue: Hiroshige Hayashizaki <hiroshige@chromium.org>
Cr-Commit-Position: refs/heads/master@{#857969}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants